Privacy Policy
This is an English translation provided for your convenience. The legally binding version of this privacy policy is the German original, the Datenschutzerklärung.
Below we inform you about the nature, scope, and purpose of the processing of your personal data when you visit our website “vica.berlin”, contact us, request an offer from us, or enter into a contract with us. Personal data is any information relating to an identified or identifiable natural person.
1. Controller
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data. The controller within the meaning of the GDPR for the personal data processed by us is:
VICA Immobilien Management GmbH
In den Floragärten 8
13187 Berlin
Germany
Phone +49 30 57711363
E-mail info@vica.berlin
(hereinafter “we”).
2. When you visit our website
When you visit our website, our server collects the following information from your device: browser type and version, operating system, the previously visited website (“referrer”), IP address, and the time of the page request.
We collect and process this data to ensure the smooth operation of our website and to be able to detect, prevent, and pursue any misuse of our services. We also use the collected data for statistical purposes, for example to evaluate which devices and browsers are used to access our website, in order to continuously adapt and improve our offering to users’ needs on this basis. This data processing is carried out in our legitimate interest on the basis of Article 6(1)(f) GDPR.
We delete all of the above personal data no later than twelve months after it is collected.
3. When you request or use our services
If you approach us with a request for an offer for our services, we process your name, address, e-mail address, and telephone number as you provide them for this purpose. Insofar as you voluntarily provide us with further data (e.g. additional means of contact or a future residential address), we also process this data.
We process this data electronically for the proper performance of the contract, in particular for the telephone coordination of your individual needs, the preparation of offers, the performance of the contract, invoicing, the recording of payments, and the handling of complaints. This data processing is carried out on the basis of Article 6(1)(b) GDPR.
We keep this data stored until all mutual claims arising from the respective contractual relationship with you have been fully settled and the retention periods under commercial and tax law to which we are subject have expired.
In order to conclude a contract between you and us, it is necessary that we receive at least your name and address. The necessity of providing this data arises from statutory provisions (e.g. § 312i(1) no. 3 BGB, § 14(4) UStG). Without providing this data, you therefore cannot conclude a contract with us.
When deciding on the conclusion of a contract, we do not use automated decision-making or profiling.
4. Payment
To pay charges due, the payment service provider you select collects and processes, on your behalf, your name, your card or account number, and/or other data required for the payment method you have chosen. In this respect, the data protection provisions of the payment service provider you have chosen apply in addition.
When receiving a payment, we process the data transmitted to us by the payment service provider.
The processing is carried out on the basis of Article 6(1)(b) GDPR (performance of a contract). We keep this data stored until all mutual claims arising from the respective contractual relationship with you have been fully settled and the retention periods under commercial, professional, and tax law to which we are subject have expired.
5. Contacting us
If you send us a message by e-mail, we store your message together with the sender data transmitted with it (name, e-mail address, and any further information added by your e-mail program and the transmitting servers).
The legal basis for this data processing is our legitimate interest in responding to your message and being able to react to any follow-up questions from you (Article 6(1)(f) GDPR). We delete the data collected with your message no later than twelve months after the last communication with you regarding your matter, subject to the provision in the following paragraph.
If you send us a legally relevant declaration concerning the contractual relationship (e.g. a revocation or a complaint), the legal basis for the processing, regardless of the means of transmission, is also Article 6(1)(b) GDPR. In such a case, we delete the data associated with your declaration as soon as all mutual claims arising from the contractual relationship have been definitively settled and the retention periods under commercial and tax law have expired.
6. Processors
For the operation of our website on the internet as well as for the receipt, storage, and dispatch of e-mails, we use the technical services of Strato (Strato AG, 10587 Berlin) as a processor pursuant to Article 28 GDPR.
7. Links to social media platforms
Social media links may be displayed on our website; they can be recognised by the logos of the social media platforms (hereinafter “platforms”) (Facebook: “f” logo, Instagram: square camera, “In” for LinkedIn, “X” for Xing). Clicking on such a logo opens the website of the respective platform, whereby the IP address of the requesting device and the address of the page from which the link is made (“referrer”) are transmitted to the platform accessed. However, we ourselves do not collect or process any data in connection with the social media buttons.
8. Your rights
With regard to the personal data we process about you, you have the following rights:
You have the right to obtain confirmation from us as to whether we process personal data concerning you. If this is the case, we will provide you with the personal data stored about you and the further information in accordance with Article 15(1) and (2) GDPR.
You have the right to have inaccurate personal data concerning you corrected without undue delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data – including by means of a supplementary declaration.
You may request that we erase the personal data concerning you without undue delay under the conditions of Article 17(1) GDPR, insofar as its processing is not necessary pursuant to Article 17(3) GDPR.
You may request that we restrict the processing of your data if one of the conditions of Article 18(1) GDPR applies. In particular, you may request restriction instead of erasure.
We will communicate any rectification or erasure of your personal data and any restriction of processing to all recipients to whom we have disclosed personal data concerning you, unless this proves impossible or involves disproportionate effort. We will also inform you about these recipients if you so request.
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and you may request that we transmit this data to another controller without hindrance, insofar as this is technically feasible.
Insofar as data processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the data processing carried out up to your withdrawal.
Right to object
For reasons arising from your particular situation, you may object at any time to the processing of personal data concerning you; this right to object exists with regard to processing carried out on the basis of Article 6(1)(f) GDPR to safeguard the legitimate interests of us or a third party, unless your interests or fundamental rights and freedoms requiring the protection of personal data prevail. If you exercise your right to object, we will no longer process the data concerned, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
In the event that we process personal data for direct marketing (e.g. newsletters), you may object at any time to the processing of personal data concerning you for the purposes of such advertising, with the effect that we will no longer process your data for these purposes.
If you believe that the processing of your personal data violates the GDPR, you may lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work, or the place of the alleged violation. This does not preclude other administrative or judicial remedies.